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CS Responsive to communication(s) filed on Apr 19, 1999 . 

□ This action is FINAL. 

□ Since this application is in condition for allowance except for formal matters, prosecution as to the merits is closed 
in accordance with the practice under Ex parte Quayle, 1935 CD. 11; 453 O.G. 213. 

A shortened statutory period for response to this action is set to expire 3 month(s) f or thirty days, whichever 
is longer, from the mailing date of this communication. Failure to respond within the period for response will cause the 
application to become abandoned. (35 U.S.C. § 133). Extensions of time may be obtained under the provisions of 
37 CFR 1.136(a). 

Disposition of Claims 

B9 Claim(s) 1-19 is/are pending in the application. 

Of the above, claim(s) is/are withdrawn from consideration. 

□ Claim(s) _ is/are allowed. 

Kl Claim (s) MS is/are rejected. 

□ Claim(s) is/are objected to. 

□ Claims are subject to restriction or election requirement. 

Application Papers 

□ See the attached Notice of Draftsperson's Patent Drawing Review, PTO-948. 

□ The drawing(s) filed on is/are objected to by the Examiner. 

□ The proposed drawing correction, filed on is Qpproved disapproved. 

□ The specification is objected to by the Examiner. 

□ The oath or declaration is objected to by the Examiner. 

Priority under 35 U.S.C. § 119 

□ Acknowledgement is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d). 

□ All □ Some* □ None of the CERTIFIED copies of the priority documents have been 

□ received. 

□ received in Application No. (Series Code/Serial Number) , . 

□ received in this national stage application from the International Bureau (PCT Rule 17.2(a)). 

*Certified copies not received: , 



□ Acknowledgement is made of a claim for domestic priority under 35 U.S.C. § 119(e). 

Attachment(s) 
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□ Interview Summary, PTO-413 

□ Notice of Draftsperson's Patent Drawing Review, PTO-948 

□ Notice of Informal Patent Application, PTO-1 52 
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DETAILED ACTION 



Response to Amendment 
1. This action is in response to the amendment filed 27 April 1999 which amended claims 1, 
5, 9, and 13. 



2. Applicant argued that it would not be obvious to a person of ordinary skill in the art to 
combine Gillon et al. with Elgamal et al. because Gillon et al. direct their invention to compressing 
data. Elgamal et al.'s invention relates to secure exchanges of data. Minimizing the amount of 
transmitted data increases security. Many attacks designed to illicitly recover information, for 
example birthday attacks, are more effective given a larger sample of encrypted data. Hence, 
combining Gillon with Elgamal et al. is obvious. 

Applicant's arguments with respect to claims 1-19 have been considered but are moot in 
view of the new ground(s) of rejection. The examiner has incorporated a new piece of prior art, 
Shaffer et al. (5784461), that shows protocol-independent encryption of data. 



Response to Arguments 



Claim Rejections - 35 USC § 103 
3. The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 
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(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

4. Claims 1, 2, 5, 6, 13, and 14 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Gillon et al. US Patent #5,838,927 in view of Elgamal et al. US Patent #5,657,390 and 
Shaffer et al. US Patent #5,784,461. 

As per claims 1, 5, and 13, Gillon et al teaches a method for, computer-readable medium 
having stored thereon a plurality of sequences of instructions for, and a computer data signal 
embodied in a carrier wave representing sequences of instruction for, providing communication 
protocol-independent security for data transmitted between a first process, executing on a first 
network node, and a second process, executing on a second network node, wherein the first 
network node and the second network node each support at least one common communication 
protocol, the method comprising the steps of, the computer-readable medium having stored 
thereon a plurality of sequences of instructions causing a processor to perform the steps of, and 
the computer data signal embodied in a carrier wave representing sequences of instruction 
providing communication protocol independent security by performing the steps of: 

establishing a first stream between the first process and the network connection ( see 
figure 5, column 7 lines 11-15, Gillon et al.'s write stream); 

establishing a second stream between the second process and the network connection ( see 
figure 5, column 7 lines 1 1-15, the reception of the write stream by the client) ; 
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encrypting data to be transmitted between the first and second processes, the encrypting of 
the data being independent of the at least one communication protocol (see column 4, lines 11-14, 
the use of HyperText Transport Protocol) supported by the first node (see column 5, lines 60-67 
and column 7 lines 4-15, Gillon et al.'s encryption of data with no header, and hence, no protocol 
specific information, at the stream level); 

writing data to the first stream (see figure 6, element 610 and column 7 lines 9-13, Gillon 
et al.'s attachment of encryption and compression streams to the write stream); 

causing the encrypted data to be transmitted from the first network node to the second 
network node (see figure 6, elements 610 and 614 and column 7 lines 13- 15, Gillon et al.'s 
transmission of write stream to the client); 

reading the encrypted data from the second stream and decrypting the encrypted data to 
obtain decrypted data which is identical to the data on the first network node before it was 
encrypted (see figure 5 and column 6 lines 38-46, Gillon et al.'s reception and decryption of the 
encrypted data); 

However, Gillon et al does not explicitly teach the establishment of a communications 
channel, secure or otherwise, prior to the transfer of stream data. 

Elgamal et al teaches the establishment of a secure communications channel between a 
first and second network node (see column 7, lines 4-8, his establishment of a secure channel by 
checking connection integrity and authenticating the connected parties) 
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In lines 3 1-38 of column 5, Shaffer et al. disclose a method of encrypting data that is 
independent of any protocols used to establish a telecommunication data transfer connection. 

It would have been obvious to one of ordinary skill in the computer art at the time the 
invention was made to combine the protocol independent encrypted system of Shaffer et al. with 
the stream of Gillon et al and the secure communication channel of Elgamal et al in order to 
improve the reliability of the data transmitted by Gillon et al's invention and thus reduce data 
latency experienced by the receiving node because Gillon et al suggests that latency is undesirable 
(column 2, lines 12-18). 

As per claims 2, 6, and 14, Gillon et al does not explicitly teach the additional steps of 
performing a communication protocol-specific encryption of the data on the first network node 
and performing a communication protocol-specific decryption of the data on the second network 
node. 

Elgamal et al teaches the steps of performing a communication protocol-specific 
encryption of the data on the first network node and performing a communication protocol- 
specific decryption of the data on the second network node (see figure 12c, and column 6 lines 
10-35, Elgamal et al's secure sockets layer encryption of data at the server and his secure sockets 
layer decryption of data at the client ) . 

It would have been obvious to one of ordinary skill in the computer art at the time the 
invention was made to combine the protocol independent encryption of Gillon et al with the 
protocol dependent encryption of Elgamal et al in order to hide sensitive information about the 
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source of the encrypted data and provide double encryption for the data itself because stronger 
encryption is universally recognized as desirable. 

5. Claims 3 5 4, 7, 8, 15 and 16 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Gillon et al. US Patent #5,838,927 in view of Elgamal et al. US Patent #5,657,390 and 
Shaffer et al. US Patent #5,784,461 as applied to claims 1,5, and 13 above, and further in view of 
van Hoff et al US Patent #5,761,421. 

As per claims 3,7, and 15, Gillon et al does not explicitly teach that the data streams are 
Java streams and Elgamal et al does not explicitly teach that the secure channel is a Java secure 
channel. 

van HofF et al teaches the secure transfer of Java data between two Java applets running 
on two clients in a network environment (see column 4 lines 26-54, van Hoff et al.'s establishment 
of a secure communications channel between two applets). 

It would have been obvious to one of ordinary skill in the computer art at the time the 
invention was made to combine the streaming encryption of Gillon et al, the protocol 
independence of Shaffer et al., and the secure channel of Elgamal et al with the Java 
communications channel and Java transfer of van HofF et al in order to allow for the encryption 
and secure stream transmission of Java data and objects because the maintenance of data integrity 
and reliability of all data types is universally recognized as desirable. 

As per claims 4, 8, and 16, Gillon et al teaches the attachment of a third stream to the 
communication channel and the transmission of data according a specific protocol (see figure 6 
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element 608, column 4 lines 11-14, column 6 lines 18-23, Gillon et al.'s attachment of multiple 
function streams to the write stream and the use of Hypertext Transfer Protocol) Official Notice 
is taken that multicasting and the branching of a single stream into multiple streams is old and 
well known in the computer art. It would have been obvious to one of ordinary skill in the art at 
the time the invention was made to combine the function providing streams and specific 
communication protocol of Gillon et al with the old and well known practice of multicasting in 
order to allow the fast and efficient distribution of stream data according to a specific 
communication protocol because high transmission speed and reduced data latency are seen as 
desirable in the computer art. ( Gillon et al suggests that latency is undesirable (column 2, lines 
12-18)) 

6. Claims 9 and 10 are rejected under 35 U.S.C. 103(a) as being unpatentable over Elgamal 
et al. US Patent #5,657,390 in view of Gillon et al. US Patent #5,838,927 and Shaffer et al. US 
Patent #5,784,461. 

As per claim 9, Elgamal et al teaches a communication network providing secure 
communication between a first network node and a second network node, wherein the first 
' network node and the second network node each support at least one common communication 
protocol, wherein the first network node is communicatively coupled to the second network node 
by a communication channel, the communication network comprising: 

a first process executing on the first network node, wherein the first process provides for 
the encryption of data (see figure 12b, column 13 lines 16-57); 
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a secure communications channel for encrypted data transfer ( column 7, lines 4-8, 
Elgamal et al.'s establishment of a secure channel by checking connection integrity and 
authenticating the connected parties); 

a second process executing on the second network node, wherein the second process 
provides for the decryption of data which has been encrypted by the first process (see figure 12b, 
column 13 lines 16-57); 

However, Elgamal et al does not explicitly teach the protocol independent encryption of 
data by the first process or the presence of a first and second stream that provides for the transfer 
of data between the communications channel and first and second processes. 

In lines 31-38 of column 5, Shaffer et al. disclose a method of encrypting data that is 
independent of any protocols used to establish a telecommunication data transfer connection. 

Gillon et al teaches the protocol independent encryption of data (see column 5, lines 60-67 
and column 7 lines 4-15, Gillon et al.'s encryption of data with no header, and hence, no protocol 
specific information, at the stream level) and the use of first and second streams to transfer the 
encrypted data between two processes in a network environment ( figure 5, column 7 lines 11-15, 
Gillon et al.'s write stream and reception of the write stream by the client). 

It would have been obvious to one of ordinary skill in the computer art at the time the 
invention was made to combine the secure channel and protocol dependent encryption scheme of 
Elgamal et al with the protocol independent encryption of Shaffer et al. and stream data transfer 
of Gillon et al in order to allow Elgamal et al's system to encrypt a data stream independent of a 
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communications protocol because Elgamal et al suggests that is desirable for an encryption 
scheme to be able to be used by many different types of applications on a wide variety of network 
machines. (See Elgamal Column 1, lines 58-67) 

As per claim 10, Elgamal et al does not explicitly teach that the encrypted data can be 
decrypted by the second process based on any communication protocol supported by the second 
network node. 

Gillon et al teaches the protocol independent encryption of data (see column 5, lines 60-67 
and column 7 lines 4-15, Gillon et al's encryption of data with no header, and hence, no protocol 
specific information, at the stream level). The capability of a process on the second node to 
decrypt the protocol independent encrypted data from the first node based upon any 
communication protocol supported by the second node is deemed to be an inherent feature of 
Gillon et al's invention because the data was encrypted without any protocol specific information 
attached and thus would be available to any layer (protocol) that desired to decrypt it. 

It would have been obvious to one of ordinary skill in the computer art at the time the 
invention was made to combine the secure channel and protocol dependent encryption scheme of 
Elgamal et al with the protocol independent encryption of Shaffer et al. and stream data transfer 
of Gillon et al in order to allow Elgamal et al's system to encrypt a data stream independent of a 
communications protocol and decrypt the same data based upon any communication protocol 
supported by the second node because Elgamal et al suggests that is desirable for an encryption 
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scheme to be able to be used by many different types of applications on a wide variety of network 
machines. (See Elgamal Column 1, lines 58-67) 

7. Claims 1 1 and 12 are rejected under 35 U.S.C. 103(a) as being unpatentable over Elgamal 
et al. US Patent #5,657,390 in view of Gillon et al. US Patent #5,838,927 and Shaffer et al. US 
Patent #5,784,461 as applied to claim 9 above, and further in view of van Hoff et al US Patent 
#5,761,421. 

As per claim 11, Elgamal et al does not explicitly teach that the secure channel is a Java 
secure channel and Gillon et al does not explicitly teach that the data streams are Java streams. 

van Hoff et al teaches the secure transfer of Java data between two Java applets running 
on two clients in a network environment (see column 4 lines 26-54, van Hoff et al.'s establishment 
of a secure communications channel between two applets). 

It would have been obvious to one of ordinary skill in the computer art at the time the 
invention was made to combine the secure channel of Elgamal et al, the protocol independence 
of Shaffer et al., and streaming encryption of Gillon et al. with the Java communications channel 
and Java transfer of van Hoff et al in order to allow for the encryption and secure stream 
transmission of Java data and objects because the maintenance of data integrity and reliability of 
all data types is universally recognized as desirable. 

As per claim 12, Gillon et al teaches the attachment of a third stream to the 
communication channel and the transmission of data according a specific protocol (see figure 6 
element 608, column 4 lines 11-14, column 6 lines 18-23, Gillon et al.'s attachment of multiple 
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function streams to the write stream and the use of HyperText Transfer Protocol) Official Notice 
is taken that multicasting and the branching of a single stream into multiple streams is old and 
well known in the computer art. It would have been obvious to one of ordinary skill in the art at 
the time the invention was made to combine the function providing streams and specific 
communication protocol of Gillon et al with the old and well known practice of multicasting in 
order to allow the fast and efficient distribution of stream data according to a specific 
communication protocol because high transmission speed and reduced data latency are seen as 
desirable in the computer art. ( Gillon et al suggests that latency is undesirable (column 2, lines 
12-18)) 

8. Claim 17 is rejected under 35 U.S.C. 103(a) as being unpatentable over Gillon et al. US 
Patent.#5,838,927 in view of Elgamal et al. US Patent #5,657,390 and Shaffer et al. US Patent 
#5,784,461. 

Gillon et al teaches a method for providing communication protocol-independent security 
for data transmitted by a process executing on a network node, the method comprising the steps 
of: 

establishing a stream between the first process and the network connection ( see figure 5, 
column 7 lines 11-15, Gillon et al.'s write stream); 

encrypting data to be transmitted by processes, the encrypting of the data being 
independent of a communication protocol (see column 4, lines 1 1-14, the use of HyperText 
Transport Protocol) supported by the network node (see column 5, lines 60-67 and column 7 lines 
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4-15, his encryption of data with no header, and hence, no protocol specific information, at the 
stream level); 

writing the encrypted data to the stream (see figure 6, element 610 and column 7 lines 9- 
13, Gillon et al.'s attachment of encryption and compression streams to the write stream); and 

causing the encrypted data to be transmitted from a network node to another network 
node (see figure 6, elements 610 and 614 and column 7 lines 13- 15, Gillon et al.'s transmission of 
write stream to the client); 

However, Gillon et al does not explicitly teach the establishment of a communications 
channel, secure or otherwise, prior to the transfer of stream data. 

Elgamal teaches the establishment of a secure communications channel between a first 
and second network node (see column 7, lines 4-8, Elgamal et al.'s establishment of a secure 
channel by checking connection integrity and authenticating the connected parties) 

In lines 3 1-38 of column 5, Shaffer et al. disclose a method of encrypting data that is 
independent of any protocols used to establish a telecommunication data transfer connection. 

It would have been obvious to one of ordinary skill in the computer art at the time the 
invention was made to combine the stream of Gillon et al with the secure communication channel 
of Elgamal et al and the protocol independent encryption of Shaffer et al. in order to improve the 
reliability of the data transmitted by Gillon et al's invention and thus reduce data latency 
experienced by the receiving node because Gillon et al suggests that latency is undesirable 
(column 2, lines 12-18). 



• 
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9. Claims 18 and 1 19 are rejected under 35 U.S.C. 103(a) as being unpatentable over Gillon 
et al US Patent #5,838,927 in view of Elgamal et al. US Patent #5,657,390 and Shaffer et al. US 
Patent #5,784,461 as applied to claim 17 above, and further in view of van Hoff et al US Patent 
#5,761,421. 

As per claim 18, Gillon et al does not explicitly teach that the data streams are Java 
streams and Elgamal et al does not explicitly teach that the secure channel is a Java secure 
channel. 

van Hoff et al teaches the secure transfer of Java data between two Java applets running 
on two clients in a network environment (see column 4 lines 26-54, van Hoff et al.'s establishment 
of a secure communications channel between two applets). 

It would have been obvious to one of ordinary skill in the computer art at the time the 
invention was made to combine the streaming protocol independent encryption of Gillon et al and 
the secure channel of Elgamal et al with the Java communications channel and Java transfer of 
van Hoff et al in order to allow for the encryption and secure stream transmission of Java data 
and objects because the maintenance of data integrity and reliability of all data types is universally 
recognized as desirable. 

As per claim 19, Gillon et al teaches the attachment of a second stream to the 
communication channel and the transmission of data according a specific protocol (see figure 6 
element 608, column 4 lines 1 1-14, column 6 lines 18-23, Gillon et al.'s attachment of multiple 
function streams to the write stream and the use of HyperText Transfer Protocol) Official Notice 




• 
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is taken that multicasting and the branching of a single stream into multiple streams is old and 
well known in the computer art. 

It would have been obvious to one of ordinary skill in the art at the time the invention was 
made to combine the function providing streams and specific communication protocol of Gillon et 
al with the old and well known practice of multicasting in order to allow the fast and efficient 
distribution of stream data according to a specific communication protocol because high 
transmission speed and reduced data latency are seen as desirable in the computer art. ( Gillon et 
al suggests that latency is undesirable (column 2, lines 12-18)) 



10. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

— Adams, Jr et al teaches encrypting data portion only of packet by device spliced into 
communications line. 

— Vidrascu et al teaches enciphering without concern for a protocol in low bandwidth 
networks. 

Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Douglas Meislahn whose telephone number is (703) 305-1338. The 
examiner can normally be reached Monday-Thursday and every other Friday from 8:30 AM to 



Conclusion 



6:00 PM. 



• 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Tod Swann, can be reached at (703) 308-7791. 

The fax number for Formal or Official faxes to Technology Center 2700 is (703) 308-9051 
or 9052. Draft Or Informal faxes for this Art Unit can be submitted to (703) 305-0040. 

Any inquiry of a general nature or relating to the status of this application should be 
directed to the Group receptionist whose telephone number is (703) 305-3900. 




DJM 

June 16, 1999 




